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(57) Abstract 

The present invention relates to a method of preventing unauthorized me of a computer program installed on a computer system. 
The method comprises determining a signature structure on (he basis of creation times for identifiers of Cyberfilcs, e.g. file catalogues. 
This signature structure is associated with the computer program which is able to recognize the current signature structure within certain 
predetermined tolerances during the execution, otherwise the execution is interrupted or changed. The invention finds use preferably for 
protecting computer programs and database information, including multimedia, against copying. 
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A method of preventing unauthorized use of a computer 
program 



5 The invention relates to a method of preventing unauthor- 
ized use of a computer program. 

Existing methods are based on obtaining signatures from 
hardware and/or operating system (s) . US Patent No. 4 688 
10 169 discloses a method based on signatures incorporated 
in the operating system. 

US Patent No. 4 74 8 561 discloses defining the signature 
structure from the configuration of a computer and pe- 
15 ripheral units on the basis of the individual signatures 
in the hardware. 

US Patent No. 5 113 518 generalizes signatures in hard- 
ware, and column 3, lines 57 - 68 exclusively mention 
20 signatures from hardware characteristics and not from 
e.g. file catalogues. 

Generally, the existing techniques depend on hardware 
and/or operating system, which means that resetting of 
25 hardware/system, exchange of parts of hardware or removal 
of a computer program on hardware and reinstallation on 
new hardware, involve considerable problems in practice 
which significantly restrict the use of the existing 
techniques . 

30 

The invention uses techniques in which the signature 
structure is based on creation time(s) for Cyberfile(s) 
identifier (s) . A Cyberfile is defined here as an element 
in the complement for ordinary files (i.e. for files 
35 placed under a file catalogue: text files, data files, 
executable files) on a storage medium, having an identi- 



Printed from Mimosa page -3- 



WO 98/34173 



2 



PCT/DK98/00009 



fier and an associated creation time, and, if the identi- 
fier is generated as a function of the creation time, 
this functional mapping must be unambiguous. A file cata- 
logue is an example of a Cyberfile. This signature struc- 
5 ture is unique for each individual computer system and 
cannot.be copied by the commercially available copying 
programs. When programming e.g. in ANSI C: "structure" 
translated into structure' as an arranged set of compo- 
nents whose names in ANSI C: "identifier" translated into 
10 ' identifikator 1 are a user-defined data type which is to 
be declared so that it can observe the creation time. 

The invention thus relates to a method of preventing un- 
authorized use of a computer program as defined in the 
15 introductory portion of claim 1, which . is characterized 
by the features defined in the characterizing portion of 
claim 1 . 

Thus, the invention makes it possible to be independent 
20 of the hardware of the computer system by solely using 
the individual "historical temporal course" of the start 
and current operation, etc. of the computer system, which 
is unique to any computer system. The creation time for 
Cyberfiles, e.g. file catalogues, are available only with 
25 very special programming tools and not necessary for the 
skilled person's programming of software. Thus, the pro- 
grammer as a skilled person need not consider and nor- 
mally has no knowledge of how the creation times are 
processed according to the invention in connection with 
30 copying. 

An embodiment of the method according to the invention 
will be described below. 

35 A signature structure is associated with the software in 
which it is desired to use the invention. The signature 
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generator is executed in the computer system the first 
time the software is to be used. In this connection, the 
signature structure is handed over to the authorizer for 
reading of the authorization request, including the sig- 
5 nature structure. The signature structure is converted by 
the authorizer to a form readable by a signature detector 
associated with the software and is subsequently stored 
in the software or in a file in the computer system. Sub- 
sequently, the software detects by means of a signature 
10 detector whether it can identify the stored signature 
structure with the detected signature structure. 

The signature generator can e.g. operate in the following 
manner. At least one identifier is created for a file 

15 catalogue for the software to be protected against copy- 
ing, followed by the determination of a desired signature 
structure (SR) consisting of creation times for selected 
file catalogues, including newly created ones. The small- 
est signature structure may consist of one creation time, 

20 and in that case it may be most expedient to select the 
creation time for the file catalogue, created in connec- 
tion with the installation of the software. 

The signature detector reads the stored signature struc- 
25 ture (SR) and compares it with the signature structure 
(SA) of the computer system in question. If this compari- 
son exceeds certain predetermined tolerances, the execu- 
tion of the software is interrupted or changed. When com- 
paring the authorized signature structure (SR) with the 
30 current signature structure (SA) , deviations may be al- 
lowed to control the access to the entire software or 
specific parts of the software, including to database (s). 

In order to improve the operational reliability of the 
35 copy protection technique according to the invention, the 
signature structure, as stated in claim 8, may contain 
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one or more creation times for identifiers from widely 
different areas of the computer system than are actually 
subjected to recognition. This may be expedient e.g. if 
some identifiers are damaged, for which reason the recog- 
5 nition may be performed on a selected minimum amount of 
the undamaged identifiers. 

With a view to being able to install new versions of the 
computer program or e.g. extending the access to a 

10 greater part of a computer program system, including as- 
sociated databases, one or more components may be added 
to the signature structure according to claim 9. Such 
components may be check/control data, e.g. version no., 
licence no., software code(s) for extended access. This 

15 may be useful in connection with e.g. the distribution of 
large computer program systems on CD ROM, where the user 
can e.g. merely receive a new installation disk from the 
supplier, which e.g. overwrites existing file(s) or 
writes new file(s) according to claims 4-6, and then the 

20 extended authorization may be applied for the use of the 
CD ROM. With reference to the latter, the invention also 
allows multiple installation of computer programs, as de- 
sired. 

25 If the computer program has one or more databases at- 
tached to it, then, according to claim 9, during execu- 
tion, the computer program can also compare the access 
code in the current signature structure with the one of 
the computer program, including e.g. the access code era- 

30 bedded in the database. This also makes it possible to 
prevent unauthorized use of database (s) which are at- 
tached to the computer program, also in encrypted form. 
This may be used to advantage e.g. on a single or spe- 
cially selected user terminal (s) attached to a larger 

35 computer system. 
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t Creation time here means the creation time in time or an 

unambiguous functional mapping of time in another data 
value, including in another data type. 

5 Addition of one or more components in the signature 
structure according to claim 10, which describes future 
times, time intervals or accumulated execution time (real 
time, machine time, see the above definition of time in 
general), may be useful in the control of the access to 

10 the computer program or to parts of the computer program 
over time. It is hereby possible to incorporate a tempo- 
ral functionality in the comparison. Thus, it may e.g. be 
ensured that the use of the computer program or part(s) 
thereof is prevented after 6 months. The use of time in- 

15 tervals e.g. 'allows access to the computer program for 
specific periods of time. When using accumulated executed 
time as a component, the execution of the computer pro- 
gram may e.g. be stopped when the use of the computer 
program exceeds the value of accumulated executed time 

20 determined in the signature structure. 

It should be noted that, according to claim 11, compo- 
nent (s) of the signature structure may also be (sub) -sig- 
nature structure (s) which describes/describe specific 
25 part(s) of the computer system. This may also be a useful 
application in computer networks. 

A computer system here means any combination of hardware, 
operating system (s) and storage medium (media) , which may 
30 also be coupled together in networks, as well as computer 
programs, including the installed computer program. This 
computer program or these computer programs are to be 
authorized for use by applying the principles of the in- 
vention. 

35 



Printed from Mimosa page -7- 



PCT/DK98/00009 



WO 98/34173 



6 



PCT/DK98/00009 



The invention will now be explained more fully with ref- 
erence to the embodiment shown in the drawing, in which 

fig. 1 shows a block diagram of an ordinary computer sys- 
5 tern illustrated with the files incorporated in the imple- 
mentation of the invention, and 

fig. 2 shows a flow chart to illustrate the principles of 
the invention. 

10 

In fig. 1, the reference numeral 1 designates a computer 
system with associated storage medium 2. The software 3 
is installed on the storage medium, consisting of a sig- 
nature generator 4, a signature detector 5 and a stored 
15 signature structure 6. 

Fig. 2 shows an example of the invention when the user is 
to use the software the first time. Starting from start 1 
the software is installed 2. Then data 3 on the user's 

20 desired application of the software may be entered, which 
may be expedient in case of voluminous software with sev- 
eral fields of application. Then the signature generator 
4 is executed, generating a predetermined amount of file 
catalogues in the software, reading the associated crea- 

25 tion times and placing all data from 3 and 4 in a signa- 
ture structure. 

Then the signature structure is transferred 5, e.g. by 
facsimile, letter, file via E-mail or simple file trans- 

30 fer, to the authorizer. The authorizer reads 6 the signa- 
ture structure to record and settle the allocated 
authorization, following which the signature structure is 
encrypted and stored in a file SR and is transferred 7, 
e.g. by facsimile, letter, file via E-mail or simple file 

35 transfer, to the authorizee (user) . 
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After the user's reception of the file SR, the file SR is 
placed 8 in the software, e.g. the file catalogue of the 
software. The authorization procedure is hereby completed 
9. 
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Patent Claims: 



1. A method of preventing unauthorized use of software 
5 on a computer system, said software having already been 
installed on a first computer system, wherein the soft- 
ware, after the installation on the first computer sys- 
tem, has generated and, together with an authorizer, has 
caused storage of a signature structure for the signature 

10 of the first computer system, wherein the software, each 
time it is started/executed in an arbitrary computer sys- 
tem, checks whether the signature structure for the first 
computer system can be identified, and if the signature 
structure is not found, then the computer program repre- 

15 sented by the software is interrupted/changed, char- 
acterized in that the software itself generates 
a signature structure in the form of an identification 
which is input in a storage in the computer system. 

20 2. A method according to claim 1, character- 
ized in that it is checked during the execution of 
the computer program whether the signature structure is 
within predetermined limits. 

25 3. A method according to claim 1, character- 
ized in that the signature structure is derived from 
one or more creation times for Cyberfiles in the computer 
system . 

30 4. A method according to claim 1, character- 
ized in that the storage used is located in a file in 
the computer system. 

5. A method according to claim 1, character- 
35 i z e d in that the storage used is embedded in the 
software . 
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6. A method according to claim 1, character- 
ized in that the storage used is compiled into the 
software . 

5 

7. A method according to claims 1-6, character- 
ized in that the signature structure is encrypted. 

8. A method according to claims 1-7, character- 
10 i z e d in that the signature structure contains a plu- 
rality of creation times for identifiers, said plurality 
being larger than the plurality currently required for 
comparison, 

15 9. A method according to claims 1-8, character- 
ized by adding to the signature structure compo- 
nent (s) which is/are check/control data providing infor- 
mation on version no., licence no., access code(s) to 
subsystem (s) of the computer program, etc. 

20 

10. A method according to claims 1-9, charac- 
terized by adding to the signature structure com- 
ponent (s) whose value (s) determines/determine the 
time (s) /time interval (s) /accumulated execution time(s) 

25 for use as check/control data. 

11. A method according to claims 1-10, charac- 
terized by adding to the signature structure com- 
ponent (s) which is/are signature structure (s) for subsys- 

30 tem(s) of the computer system. 
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